Privacy Policy

Last updated: 03/11/2025

Controller: Spark 365 Ltd, trading as Spark 365 (“we”, “us”, “our”). Registered in England & Wales (Company No 13474003). Registered address: The Old Forge Bowling Green Yard, Kirkgate, Knaresborough, North Yorkshire, HG5 8FL.
We are committed to protecting and respecting your privacy. This policy explains how we collect, use, disclose, and safeguard your personal data when you use our website www.spark365.co.uk (“Website”) and our services.
1. What data we collect We may collect the following personal data: Contact details: name, email address, telephone number Company details: organisation name, role, business address Usage data: IP address, browser type, pages visited, date/time stamp, referring/exit pages Cookies and tracking data (see our Cookie Policy) Any other information you voluntarily provide (e.g., via forms, enquiries)

2. How we use your data and the legal basis We process your data for the following purposes: To respond to your enquiries and book a discovery call (legitimate interest) To provide you with information about our services and products (consent or legitimate interest) To improve our website and marketing efforts (legitimate interest) To comply with legal obligations (e.g., financial, tax, audit requirements)

3. Disclosure of your data We may share your personal data with: Our service providers (e.g., hosting, analytics, email marketing) who act as processors Microsoft and relevant partners when delivering services (with your prior agreement) Regulatory or legal authorities where required by law We do not sell your personal data to third parties.

4. International transfers Where data is transferred outside the UK/EEA (e.g., to Microsoft Azure services), we ensure appropriate safeguards (Standard Contractual Clauses or UK Transfer Regulations) are in place.

5. Data retention We retain your personal data only for as long as necessary: For enquiries and marketing: up to 3 years unless you ask us to delete it For contractual and financial records: up to 7 years in line with statutory requirements After that, data is securely deleted or anonymised.

6. Your rights Under GDPR you have the following rights: Right of access to your personal data Right of rectification if data is inaccurate Right of erasure (the “right to be forgotten”) in certain cases Right to restrict processing Right to data portability Right to object to processing (including profiling) Right to withdraw consent at any time, without affecting processing done previously To exercise any of these rights or to ask questions please contact: [privacy@spark365.co.uk]

7. Cookies and tracking We use cookies and similar technologies. For details please see our Cookie Policy.

8. Changes to this Policy We reserve the right to update this Privacy Policy at any time. We will publish the date of last update at the top and notify users of significant changes.

9. Contact us Spark 365 Ltd, The Old Forge Bowling Green Yard, Kirkgate, Knaresborough, North Yorkshire, HG5 8FL Email: privacy@spark365.co.uk

Data Subject Rights

Under the General Data Protection Regulation, individuals whose personal data we process have the following rights: access, rectification, erasure, restriction of processing, data portability, object to processing, and withdraw consent.

To submit a request please email [privacy@spark365.co.uk] with subject “Data Subject Rights Request” and include your name, email address, description of the request and any relevant supporting information. We will respond within one month, unless a longer period is permitted by law.